5.7 Assured Workloads (Compliance-Specific Scenarios)

If your business falls under a specific regulatory regime like FedRAMP, CJIS or ITAR (most companies won't need this — look into it if and when it applies), Assured Workloads can wrap an entire folder in a given compliance package, automatically applying the matching regional restrictions, encryption requirements and personnel-access restrictions. Any resource created underneath inherits them automatically, so you don't have to re-configure each project from scratch.

Working Terraform examples for KMS / Secret Manager / Cloud Armor / Binary Authorization live in the security-products/ sub-project.